[Bro-Dev] #329: Remove detect-protocols-http.bro from Broctl's default local.bro

Bro Tracker bro at tracker.icir.org
Sun Dec 5 11:27:53 PST 2010


#329: Remove detect-protocols-http.bro from Broctl's default local.bro
-------------------------+--------------------
  Reporter:  seth        |      Owner:  robin
      Type:  Task        |     Status:  new
  Priority:  Normal      |  Milestone:  Bro1.6
 Component:  BroControl  |    Version:
Resolution:              |   Keywords:
-------------------------+--------------------

Comment (by vern):

 Two thoughts on keeping it by making it more efficient:

 (1) Rewrite the for loop to instead use the '''match''' primitive.

 (2) Provide language support for constructing a merged version of the
 regular expressions listed in the table, and then first test whether
 there's a match to the disjunction of them before bothering to loop over
 to find which particular one matched.

-- 
Ticket URL: <http://tracker.icir.org/bro/ticket/329#comment:1>
Bro Tracker <http://tracker.icir.org/bro>
Bro Issue Tracker




More information about the bro-dev mailing list